Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UompkDibE7Idho12kuv0QfILdDs.roa
File: UompkDibE7Idho12kuv0QfILdDs.roa (raw, json)
Hash identifier: eOc3wxXSik22szBwwT0ZEAtIFGQ6B7AWNYGwpIrcNCM=
Subject key identifier: 52:89:A9:90:38:9B:13:B2:1D:86:8D:76:92:EB:F4:41:F2:0B:74:3B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C5873D4B0A43D052645561FE81F60
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UompkDibE7Idho12kuv0QfILdDs.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199707
IP address blocks: 2a12:bec0:160::/48 maxlen: 48
2a12:bec0:162::/48 maxlen: 48
2a12:bec0:166::/48 maxlen: 48
2a12:bec0:168::/48 maxlen: 48
2a12:bec0:16d::/48 maxlen: 48
2a12:bec0:16e::/48 maxlen: 48
2a12:bec0:680::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:58:73:d4:b0:a4:3d:05:26:45:56:1f:e8:1f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5289a990389b13b21d868d7692ebf441f20b743b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:a6:4d:a0:f2:5e:63:23:c3:3b:d4:22:50:
c7:a0:c8:2c:ee:f9:7b:c6:08:ce:51:e0:7f:4d:cf:
4e:1d:27:5f:26:df:25:24:eb:bd:3c:d2:a7:41:9c:
60:6e:2b:85:07:9f:5e:be:bc:d3:31:8e:6e:1f:51:
74:0e:0c:15:6d:37:32:7c:4f:d4:ad:e9:52:33:42:
b8:6b:13:0c:5f:6c:00:1a:af:43:aa:c6:ac:c6:db:
59:04:c0:ef:84:45:a5:ee:c3:ae:f4:5e:82:d9:1f:
13:cb:3f:9d:3c:87:b8:3c:20:41:52:e6:88:b9:59:
db:d3:43:ff:7b:37:9b:96:1b:e7:25:99:84:e8:23:
89:2a:25:66:92:5f:44:a3:ed:2a:98:26:d6:7a:73:
62:f7:53:5f:38:97:3f:6d:51:2a:3e:12:04:ae:30:
d2:3b:31:c7:28:f4:3a:e6:56:95:64:c0:0e:64:ed:
e0:f3:22:d9:ef:a2:5d:52:ce:e1:a3:ce:5b:e3:c5:
64:fa:d2:84:14:5c:40:7d:a1:2f:1e:a1:ca:51:a2:
e0:af:8b:aa:2d:5e:44:ca:5c:b5:8c:fd:c3:db:24:
c2:c1:ce:a3:2a:da:b1:15:59:2b:7f:92:66:91:17:
f4:53:1b:3f:5c:cd:2d:a8:ce:d5:14:73:4f:05:e2:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:89:A9:90:38:9B:13:B2:1D:86:8D:76:92:EB:F4:41:F2:0B:74:3B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UompkDibE7Idho12kuv0QfILdDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:160::/48
2a12:bec0:162::/48
2a12:bec0:166::/48
2a12:bec0:168::/48
2a12:bec0:16d::-2a12:bec0:16e:ffff:ffff:ffff:ffff:ffff
2a12:bec0:680::/45
Signature Algorithm: sha256WithRSAEncryption
6b:c7:2a:fd:8f:ab:0f:d6:45:df:65:eb:53:0e:17:d2:22:54:
3a:f8:10:eb:3c:1a:2b:ea:66:33:7e:7c:f1:db:fd:10:23:c0:
3a:7c:83:48:62:40:09:0e:53:d6:d9:35:6d:2f:e6:af:18:eb:
38:71:2c:9e:38:33:67:a4:88:20:61:26:09:0a:60:bf:a1:e4:
90:91:74:99:78:b3:67:83:82:16:fd:c3:57:98:56:fa:89:15:
b1:44:91:3b:44:33:9b:e6:a7:5b:79:d6:20:94:30:3a:89:e1:
27:48:28:db:cf:fb:58:a9:a8:99:d3:07:df:96:ba:05:99:a3:
a8:54:c7:5b:f7:4a:cf:7d:ac:30:35:3d:f7:57:38:83:53:f0:
81:0e:b2:98:8d:7f:b2:ee:e8:9e:84:f6:d8:a9:c6:86:1b:97:
ff:de:03:98:ca:9e:9d:83:11:fe:b6:41:e5:80:fe:9a:4a:3f:
93:ba:7a:08:9f:22:f5:46:20:32:1d:22:a4:11:62:7e:c5:4d:
ce:36:aa:09:17:a6:c2:8a:d4:e3:c2:0a:23:0d:fd:1f:47:8c:
85:63:ba:f9:a9:de:a6:4f:bd:ba:aa:3d:5a:1c:7b:d8:ba:87:
f1:6c:bc:13:72:c9:73:dd:cc:5e:6a:db:e8:46:a7:54:1f:8f:
bc:c6:ee:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:38:06 2025 by rpki-client